libglusterfs.so is vulnerable to denial of service (DoS). There are no controls to prevent dumping of files on the server side, which allows a compromised client to create io-stats
dumps on the server repeatedly until all available inodes
have been exhausted, resulting in a denial of service condition.
access.redhat.com/errata/RHSA-2018:3431
access.redhat.com/errata/RHSA-2018:3432
access.redhat.com/errata/RHSA-2018:3470
access.redhat.com/security/cve/CVE-2018-14659
bugzilla.redhat.com/show_bug.cgi?id=1635929
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14659
lists.debian.org/debian-lts-announce/2018/11/msg00003.html
lists.debian.org/debian-lts-announce/2021/11/msg00000.html
review.gluster.org/#/c/glusterfs/+/21530/
security.gentoo.org/glsa/201904-06